For your last config object, we have the following - looks like the "name" and
"encapsulate" are the opposite values of yours.
{
"name": "vendor-encapsulated-options",
"code": 43,
"type": "empty",
"encapsulate": "CALIX-ONT-SERVER"
}
Jason Creviston
Sr. Network Administrator
P: 765-795-9305 2 S. West Street – P.O. Box 237, Cloverdale, IN
46120
Book an appointment with
me!<https://outlook.office365.com/owa/calendar/jasoncrevis...@weendeavor.com/bookings/>
[cid:codetwo-signature-logo-endeavor_1c9b8f6f-f797-4b22-a7d8-b9c8f1b0c327.png]
[cid:codetwo-gigtel-logo2_e109b7e4-b185-40fc-94f2-947f96c612cf.png]
[cid:endeavor-it-signature-2_cad37e9b-ad7b-4219-a677-f37914c8d32a.png]
weEndeavor.com<http://weendeavor.com/> GigTel.com<http://gigtel.com/>
EndeavorIT.com<http://EndeavorIT.com>
CONFIDENTIALITY NOTICE: The information in this Email and my attachments are
confidential and may be privileged. This Email is intended solely for the named
recipient or recipients. If you are not the intended recipient, any use,
disclosure, copying or distribution of this Email is prohibited. If you are not
the intended recipient, please inform us by replying with the subject line
"Wrong Address" and then delete this Email and any attachments. Endeavor
Communications uses regularly updated anti-virus software in an attempt to
reduce the possibility of transmitting computer viruses. We do not guarantee,
however, that any attachments to this Email are virus-free.
________________________________
From: Kea-users <kea-users-boun...@lists.isc.org> on behalf of Stuart Fortman
<stua...@wabash.com>
Sent: Thursday, April 10, 2025 2:36 PM
To: kea-users@lists.isc.org <kea-users@lists.isc.org>
Subject: [Kea-users] Option 43
CAUTION: This email is from OUTSIDE our organization. Please do not
open/download any attachment or click any link unless you know it's safe.
We migrated our ONT management networks from the old isc-dhcp to kea. I
recently noticed that our Calix ONTs are no longer picking up the CMS server IP
address via option 43. It looks like the ONT is requesting option 43, but we’re
not sending it. I’ve been reading the documentation, but I must be missing
something.
Here’s a snippet of how we had it on the old ISC DHCP:
option space CALIX-ONT-SERVER;
option CALIX-ONT-SERVER.cms-address code 1 = ip-address;
option CALIX-ONT-SERVER.second-tftp-address code 2 = ip-address;
option CALIX-ONT-SERVER.syslog-address code 4 = ip-address;
option CALIX-ONT-SERVER.firmware1 code 101 = text;
option CALIX-ONT-SERVER.firmware2 code 102 = text;
option CALIX-ONT-SERVER.firmware3 code 103 = text;
option CALIX-ONT-SERVER.syslog-address code 4 = ip-address;
shared-network FtRec_AEMGMT {
subnet 10.17.16.0 netmask 255.255.240.0 {
option routers 10.17.16.1;
option broadcast-address 10.17.31.255;
option domain-name-servers 192.168.2.10, 192.168.2.150;
default-lease-time 86400;
authoritative;
option time-servers 192.168.4.44;
option ntp-servers 192.168.4.44;
option tftp-server-name "192.168.4.44";
server-name "192.168.4.44";
vendor-option-space CALIX-ONT-SERVER;
option CALIX-ONT-SERVER.cms-address 192.168.4.44;
option CALIX-ONT-SERVER.syslog-address 192.168.4.44;
host 10.17.18.12 {
host-identifier option agent.circuit-id "Fort_Recovery_6314_Slot_1 eth
1/Ethernet12:62";
fixed-address 10.17.18.12;
filename "101618012.cfg";
}
}
On KEA we have this:
"option-def": [
{
"name": "cms-address",
"code": 1,
"space": "CALIX-ONT-SERVER",
"type": "ipv4-address",
},
{
"name": "option-160",
"code": 160,
"space": "dhcp4",
"type": "string",
"record-types": "",
"array": false,
"encapsulate": ""
},
{
"name": "syslog-address",
"code": 4,
"space": "CALIX-ONT-SERVER",
"type": "ipv4-address"
},
{
"name": "CALIX-ONT-SERVER",
"code": 43,
"space": "dhcp4",
"type": "empty",
"encapsulate": "vendor-encapsulated-options"
}
For the subnet configuration, dhcp4 options and host reservation, we’re using
the MariaDB backend and have the following:
MariaDB [kea]> select * from dhcp4_subnet where subnet_id=12;
+-----------+---------------+---------------+------------------+------------+----------------+--------------+-----------+-----------------+---------------------+-------------+--------------+-------+-------------+------------------------+-----------------+---------------------+--------------+----------------+---------------+---------------------+------------+------------+--------------------+--------------------+-------------------+-------------------------+-----------------------------+--------------------------+-----------------------+------------------------+---------------------+------------------------+--------------------------+-----------------+---------------+----------------+-----------+
| subnet_id | subnet_prefix | 4o6_interface | 4o6_interface_id | 4o6_subnet |
boot_file_name | client_class | interface | match_client_id | modification_ts
| next_server | rebind_timer | relay | renew_timer | require_client_classes |
server_hostname | shared_network_name | user_context | valid_lifetime |
authoritative | calculate_tee_times | t1_percent | t2_percent |
min_valid_lifetime | max_valid_lifetime | ddns_send_updates |
ddns_override_no_update | ddns_override_client_update |
ddns_replace_client_name | ddns_generated_prefix | ddns_qualifying_suffix |
reservations_global | reservations_in_subnet | reservations_out_of_pool |
cache_threshold | cache_max_age | offer_lifetime | allocator |
+-----------+---------------+---------------+------------------+------------+----------------+--------------+-----------+-----------------+---------------------+-------------+--------------+-------+-------------+------------------------+-----------------+---------------------+--------------+----------------+---------------+---------------------+------------+------------+--------------------+--------------------+-------------------+-------------------------+-----------------------------+--------------------------+-----------------------+------------------------+---------------------+------------------------+--------------------------+-----------------+---------------+----------------+-----------+
| 12 | 10.17.16.0/20 | NULL | NULL | NULL |
NULL | NULL | NULL | NULL | 2025-02-10
16:17:25 | NULL | NULL | NULL | NULL | NULL
| NULL | FtRec_AEMGMT | NULL | 86400 |
NULL | NULL | NULL | NULL |
NULL | NULL | NULL | NULL |
NULL | NULL | NULL | NULL
| NULL | NULL |
NULL | NULL | NULL | NULL | NULL |
+-----------+---------------+---------------+------------------+------------+----------------+--------------+-----------+-----------------+---------------------+-------------+--------------+-------+-------------+------------------------+-----------------+---------------------+--------------+----------------+---------------+---------------------+------------+------------+--------------------+--------------------+-------------------+-------------------------+-----------------------------+--------------------------+-----------------------+------------------------+---------------------+------------------------+--------------------------+-----------------+---------------+----------------+-----------+
1 row in set (0.001 sec)
MariaDB [kea]> select * from dhcp4_options where dhcp4_subnet_id=12;
+-----------+------+-------+-----------------------------+------------------+------------+-------------------+-----------------+---------+----------+--------------+---------------------+---------+---------------------+-----------+
| option_id | code | value | formatted_value | space |
persistent | dhcp_client_class | dhcp4_subnet_id | host_id | scope_id |
user_context | shared_network_name | pool_id | modification_ts | cancelled |
+-----------+------+-------+-----------------------------+------------------+------------+-------------------+-----------------+---------+----------+--------------+---------------------+---------+---------------------+-----------+
| 21 | 6 | NULL | 192.168.2.10, 192.168.2.150 | dhcp4 |
0 | NULL | 12 | NULL | 1 | NULL
| NULL | NULL | 2025-03-25 19:26:46 | 0 |
| 22 | 3 | NULL | 10.17.16.1 | dhcp4 |
0 | NULL | 12 | NULL | 1 | NULL
| NULL | NULL | 2025-03-25 19:26:46 | 0 |
| 151 | 1 | NULL | 192.168.4.44 | CALIX-ONT-SERVER |
0 | NULL | 12 | NULL | 1 | NULL
| NULL | NULL | 2025-02-10 16:17:25 | 0 |
| 152 | 4 | NULL | 192.168.2.10 | dhcp4 |
0 | NULL | 12 | NULL | 1 | NULL
| NULL | NULL | 2025-02-10 16:17:40 | 0 |
| 153 | 42 | NULL | 192.168.2.10 | dhcp4 |
0 | NULL | 12 | NULL | 1 | NULL
| NULL | NULL | 2025-02-10 16:17:59 | 0 |
| 154 | 66 | NULL | 192.168.4.44 | dhcp4 |
0 | NULL | 12 | NULL | 1 | NULL
| NULL | NULL | 2025-02-10 16:19:49 | 0 |
+-----------+------+-------+-----------------------------+------------------+------------+-------------------+-----------------+---------+----------+--------------+---------------------+---------+---------------------+-----------+
6 rows in set (0.001 sec)
MariaDB [kea]> select * from hosts where ipv4_address =
inet_aton('10.17.18.12');
+---------+-----------------------------------------------+----------------------+-----------------+-----------------+--------------+----------+----------------------+----------------------+-------------------+-----------------------+----------------------+--------------+----------+
| host_id | dhcp_identifier |
dhcp_identifier_type | dhcp4_subnet_id | dhcp6_subnet_id | ipv4_address |
hostname | dhcp4_client_classes | dhcp6_client_classes | dhcp4_next_server |
dhcp4_server_hostname | dhcp4_boot_file_name | user_context | auth_key |
+---------+-----------------------------------------------+----------------------+-----------------+-----------------+--------------+----------+----------------------+----------------------+-------------------+-----------------------+----------------------+--------------+----------+
| 16558 | Fort_Recovery_6314_Slot_1 eth 1/Ethernet12:62 |
2 | 12 | NULL | 168890892 | NULL | NULL
| NULL | NULL | NULL |
101618012.cfg | NULL | NULL |
+---------+-----------------------------------------------+----------------------+-----------------+-----------------+--------------+----------+----------------------+----------------------+-------------------+-----------------------+----------------------+--------------+----------+
When I do a tcpdump on kea-1, I see the ONT requests the Vendor-Option 43 which
I believe means we shouldn’t require the "always-send": true
17:59:48.982420 IP (tos 0x0, ttl 62, id 0, offset 0, flags [DF], proto UDP
(17), length 457)
10.17.18.12.bootpc > kea-1.bootps: [udp sum ok] BOOTP/DHCP, Request from
44:65:7f:1d:21:6b (oui Unknown), length 429, xid 0xef2063ac, secs 5, Flags
[Broadcast] (0x8000)
Client-IP 10.17.18.12
Client-Ethernet-Address 44:65:7f:1d:21:6b (oui Unknown)
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: Request
Client-ID (61), length 23: "CXNK005AE567-101618012"
Vendor-Class (60), length 9: "CALIX ONT"
Vendor-Option (43), length 86:
1.3.79.78.84.2.5.55.49.49.71.69.3.12.67.88.78.75.48.48.53.65.69.53.54.55.4.9.49.48.49.54.49.56.48.49.50.5.12.52.49.53.48.48.51.54.56.50.54.32.32.6.11.52.49.53.48.48.51.54.56.50.54.32.7.11.49.48.46.55.46.49.49.48.46.49.55.8.6.68.101.127.29.33.107.255
Parameter-Request (55), length 10:
Subnet-Mask (1), Default-Gateway (3), NTP (42),
Domain-Name-Server (6)
Time-Server (4), Time-Zone (2), Vendor-Option (43), TFTP (66)
BF (67), RP (17)
Agent-Information (82), length 47:
Circuit-ID SubOption 1, length 45: Fort_Recovery_6314_Slot_1 eth
1/Ethernet12:62
END (255), length 0
0x0000: 0050 56ae dc9f 288a 1c05 c681 0800 4500 .PV...(.......E.
0x0010: 01c9 0000 4000 3e11 5a28 0a11 120c c0a8 ....@.>.Z(......
0x0020: 0437 0044 0043 01b5 cc7a 0101 0600 ef20 .7.D.C...z......
0x0030: 63ac 0005 8000 0a11 120c 0000 0000 0000 c...............
0x0040: 0000 0000 0000 4465 7f1d 216b 0000 0000 ......De..!k....
0x0050: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0080: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0090: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0100: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0110: 0000 0000 0000 6382 5363 3501 033d 1700 ......c.Sc5..=..
0x0120: 4358 4e4b 3030 3541 4535 3637 2d31 3031 CXNK005AE567-101
0x0130: 3631 3830 3132 3c09 4341 4c49 5820 4f4e 618012<.CALIX.ON
0x0140: 542b 5601 034f 4e54 0205 3731 3147 4503 T+V..ONT..711GE.
0x0150: 0c43 584e 4b30 3035 4145 3536 3704 0931 .CXNK005AE567..1
0x0160: 3031 3631 3830 3132 050c 3431 3530 3033 01618012..415003
0x0170: 3638 3236 2020 060b 3431 3530 3033 3638 6826....41500368
0x0180: 3236 2007 0b31 302e 372e 3131 302e 3137 26...10.7.110.17
0x0190: 0806 4465 7f1d 216b ff37 0a01 032a 0604 ..De..!k.7...*..
0x01a0: 022b 4243 1152 2f01 2d46 6f72 745f 5265 .+BC.R/.-Fort_Re
0x01b0: 636f 7665 7279 5f36 3331 345f 536c 6f74 covery_6314_Slot
0x01c0: 5f31 2065 7468 2031 2f45 7468 6572 6e65 _1.eth.1/Etherne
0x01d0: 7431 323a 3632 ff t12:62.
But I don’t see kea actually responding with the option 43 information:
17:59:48.997377 IP (tos 0x10, ttl 128, id 0, offset 0, flags [DF], proto UDP
(17), length 418)
kea-1.bootps > 10.17.18.12.bootpc: [udp sum ok] BOOTP/DHCP, Reply, length
390, xid 0xef2063ac, Flags [Broadcast] (0x8000)
Client-IP 10.17.18.12
Your-IP 10.17.18.12
Client-Ethernet-Address 44:65:7f:1d:21:6b (oui Unknown)
file "101618012.cfg"
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message (53), length 1: ACK
Subnet-Mask (1), length 4: 255.255.240.0
Default-Gateway (3), length 4: 10.17.16.1
Time-Server (4), length 4: ns1.wabash.local
Domain-Name-Server (6), length 8: ns1.wabash.local,192.168.2.150
NTP (42), length 4: ns1.wabash.local
Lease-Time (51), length 4: 86400
Server-ID (54), length 4: kea-1
RN (58), length 4: 900
RB (59), length 4: 1800
Client-ID (61), length 23: "CXNK005AE567-101618012"
TFTP (66), length 12: "192.168.4.44"
Agent-Information (82), length 47:
Circuit-ID SubOption 1, length 45: Fort_Recovery_6314_Slot_1 eth
1/Ethernet12:62
END (255), length 0
0x0000: ffff ffff ffff 0050 56ae dc9f 0800 4510 .......PV.....E.
0x0010: 01a2 0000 4000 8011 183f c0a8 0437 0a11 ....@....?...7..
0x0020: 120c 0043 0044 018e d900 0201 0600 ef20 ...C.D..........
0x0030: 63ac 0000 8000 0a11 120c 0a11 120c 0000 c...............
0x0040: 0000 0000 0000 4465 7f1d 216b 0000 0000 ......De..!k....
0x0050: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0080: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0090: 0000 0000 0000 3130 3136 3138 3031 322e ......101618012.
0x00a0: 6366 6700 0000 0000 0000 0000 0000 0000 cfg.............
0x00b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x00f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0100: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0110: 0000 0000 0000 6382 5363 3501 0501 04ff ......c.Sc5.....
0x0120: fff0 0003 040a 1110 0104 04c0 a802 0a06 ................
0x0130: 08c0 a802 0ac0 a802 962a 04c0 a802 0a33 .........*.....3
0x0140: 0400 0151 8036 04c0 a804 373a 0400 0003 ...Q.6....7:....
0x0150: 843b 0400 0007 083d 1700 4358 4e4b 3030 .;.....=..CXNK00
0x0160: 3541 4535 3637 2d31 3031 3631 3830 3132 5AE567-101618012
0x0170: 420c 3139 322e 3136 382e 342e 3434 522f B.192.168.4.44R/
0x0180: 012d 466f 7274 5f52 6563 6f76 6572 795f .-Fort_Recovery_
0x0190: 3633 3134 5f53 6c6f 745f 3120 6574 6820 6314_Slot_1.eth.
0x01a0: 312f 4574 6865 726e 6574 3132 3a36 32ff 1/Ethernet12:62.
Any help is appreciated.
Stuart Fortman, Network Manager
Wabash Mutual Telephone Company
6670 Wabash Road, Celina, Ohio 45822
stua...@wabash.com<mailto:stua...@wabash.com>
419.942.1111 | wabash.com<https://www.wabash.com> |
[https://www.wabash.com/Fbook.jpg]
<https://www.facebook.com/wabashmutualtelephone>
[https://www.wabash.com/wabashpic.jpg]<https://www.wabash.com/>
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users
